vault: tighten public response headers

This commit is contained in:
jenkins 2026-07-18 11:34:54 -03:00
parent 3f9d3f17ca
commit d932c5b385

View File

@ -6,6 +6,7 @@ metadata:
namespace: vault namespace: vault
spec: spec:
headers: headers:
contentSecurityPolicy: "default-src 'none'; connect-src 'self'; img-src 'self' data:; script-src 'self'; style-src 'unsafe-inline' 'self'; form-action 'none'; frame-ancestors 'none'; font-src 'self'"
contentTypeNosniff: true contentTypeNosniff: true
frameDeny: true frameDeny: true
referrerPolicy: no-referrer referrerPolicy: no-referrer
@ -26,6 +27,8 @@ spec:
Server: "" Server: ""
X-Powered-By: "" X-Powered-By: ""
X-Vault-Cluster: "" X-Vault-Cluster: ""
X-Vault-Index: ""
X-Vault-Known-Leader: ""
X-Vault-Namespace: "" X-Vault-Namespace: ""
--- ---